Behavioral task
behavioral1
Sample
46d3911ba07dd80a4fd15d6dfa934606ad4c2a12be2dbbae45d376fe834fbee8.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
46d3911ba07dd80a4fd15d6dfa934606ad4c2a12be2dbbae45d376fe834fbee8.exe
Resource
win10v2004-20240611-en
General
-
Target
46d3911ba07dd80a4fd15d6dfa934606ad4c2a12be2dbbae45d376fe834fbee8.exe
-
Size
852KB
-
MD5
0dd262790ac80f2b13a6d2c460ba05e0
-
SHA1
3e88c05b448f5a8af0a73ff2d9c35a51807e8b58
-
SHA256
46d3911ba07dd80a4fd15d6dfa934606ad4c2a12be2dbbae45d376fe834fbee8
-
SHA512
365bdb9a0ed5b843665162238fb135353447a721fea38e8f05da10f243b963b9b7d77689a579d0a5326089156b11971e23abe07cc64a99abb8ce2e97c2e385e9
-
SSDEEP
24576:l/u5r8puPbxBkhSI/E3xK8Vsi66MapRnz:hs4puPbxGhbE3xS6T5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46d3911ba07dd80a4fd15d6dfa934606ad4c2a12be2dbbae45d376fe834fbee8.exe
Files
-
46d3911ba07dd80a4fd15d6dfa934606ad4c2a12be2dbbae45d376fe834fbee8.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB